Cryptsetup Project Cryptsetup
3 CVEs affecting Cryptsetup Project Cryptsetup. Latest disclosed: 2022-08-24. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14382 | High | 7.8 | 2020-09-16 | A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every devic… |
CVE-2016-4484 | Medium | 6.8 | 2017-01-23 | The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts w… |
CVE-2021-4122 | Medium | 4.3 | 2022-08-24 | It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical… |